CVE-2008-5617

N/A Unknown

Published: December 17, 2008 Modified: April 23, 2026

Description

The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://secunia.com/advisories/32857

Source: cve@mitre.org

Vendor Advisory

http://www.rsyslog.com/Article322.phtml

Source: cve@mitre.org

Patch Vendor Advisory

http://www.rsyslog.com/Article327.phtml

Source: cve@mitre.org

http://www.rsyslog.com/Topic4.phtml

Source: cve@mitre.org

http://www.securityfocus.com/bid/32630

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47080

Source: cve@mitre.org

http://secunia.com/advisories/32857